{"report_id":"a1d32501-4d34-4567-9c4b-aca762b75f88","version":0,"status":"done","tags":[],"date":"2026-07-23T04:45:26Z","url":{"schema":"http","addr":"hbitatrzovin.com","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"172.67.167.127","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hbitatrzovin.com/","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"title":"Hbitá Tržovín – Dôveryhodná platforma pre AI obchodovanie","dom":{"size":122725,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38055)","md5":"17b05847f6a14dedc812fb41d45878be","sha1":"46abba9cca12693b9badb0a4bfd7890a438b56c0","sha256":"58c357ecf015f0d5d575f26a904e8c909457334dd0668046a68b8e95476b376c","sha512":"6f1ca73d3df362cca165aa2fba782aacbbf7f0e12129a7e1a9ea7141e8d08339dc2daa515d8a3fa6013e43f9459fd8604d458a8f39da69d920cd6c115d7e821f","ssdeep":"1536:fzMcp6vsEa0HSJwYpOe0II4IIIIINAjbW0+YAHSIed0/K8qGF:wcpprbjoZH/KpGF","tlshash":"03c34b33a1a0101ea2a784d2a6e1671e766cc103c50746f9fafd57568fcbcd29a3338d","dom_hash":"domhashecb35a1f83e9dce956314d931ed77b2a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hbitatrzovin.com","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"172.67.167.127","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-27T04:45:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"hbitatrzovin.com","ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-25","domain_rank":0,"first_seen":"2026-07-23T04:45:27.193698Z","last_seen":"2026-07-23T04:45:27.193698Z","alert_count":186,"request_count":31,"received_data":865569,"sent_data":15436,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hbitatrzovin.com/","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4f13a02fc132497b9312b23b32f707ec","sha1":"ceb452dbe02e7332bbf9c9d6cf85f8f6ccea923d","sha256":"9548ada7ca24913dbd4d0f323dd931834dafd4a0ccad52c8357a63fc3c537ed1","sha512":"65c1a5073445c7153729c1fb3ed39aacc54acce90e9df691cf83af752838eebe828dd29847050af7614deccc379b00d5a20143eca597eb5716bffe3646944e1a","ssdeep":"","tlshash":"7611ab343656a47486f18135a3bf3f003b3562352883a08452a8cc7ebc72a47e4754db","size":989,"data":"","first_seen":"2026-07-18T04:12:14.871136Z","last_seen":"2026-07-23T06:20:40.370545Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1773a4a64ac3d9f7f3193912706a0e67","sha1":"9c3a12b79456b065008860cd95c7a988393e350d","sha256":"a5a6c275cb0ae27df9bbcb67c072ee59442abb81b6642a111460f66b85efe9a7","sha512":"3115932da5d33d4271ea265fea6632c987b4e97fe9c2e001857a874e096abd756b5153d00586a309bfe8f6cec33075d1f9a9b0a9a76d1c3f3824a20fd7a88ab4","ssdeep":"","tlshash":"f2b012500ca8023059e5b718f333eb0062b50100493213e0a6cd011bfd0300344184f0","size":100,"data":"","first_seen":"2026-03-14T13:26:03.991004Z","last_seen":"2026-07-23T06:20:40.371066Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0373db287b5387495d7364002bf8c24e","sha1":"42ab6299d9310c74c3366117493ced1cf82488ed","sha256":"d69859120702c6b9b366099414d4000d2d31b6e59cf25cb57570a95c6e18dbda","sha512":"2636359bd1fee9c68cd19b1bd87edf70a7c1cf85499bb6d56e7ad6b386c15993b60ebed293619232ab44ad295c85fbb7a73686ea5a0ac2c679f9a4cad4dcaa0b","ssdeep":"","tlshash":"aae02ba5e104203b984707e645eb97ce7c2271257a4210958a1d94891ebc7471e67de9","size":422,"data":"","first_seen":"2026-02-20T08:42:36.257839Z","last_seen":"2026-07-23T06:20:40.371496Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"06e143988d5890b6a1c24a51f134865f","sha1":"48621cd9d355e33290650ac1e6c50c6cca3b2a88","sha256":"335291a64de4df90787ff05d5e2218d069877c792c198d70a1b79c5bf45f614f","sha512":"6ef4c759447813cb6f01ada7b1e5ef33f60db67294c8c67472732fb91736d4c7724635c38612dae585ec833d61315e9b36506df90e8ee082b8cab151c64d83aa","ssdeep":"","tlshash":"54f07db9fb59f0368261703629ff83996f3a14b22d52614451c5f5949c31e87c03bdce","size":619,"data":"","first_seen":"2026-07-22T21:48:02.604676Z","last_seen":"2026-07-23T06:20:40.371967Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b3fae388261bc86c3b5856da3acd7416","sha1":"d7e015351d94bb755734edad14df20623a170fdd","sha256":"d76f95362977b22975f8cbcf79c975282035431a8ad05c2ddf80977d97f9b61a","sha512":"5c76bd5bd9a4db80556a497bbc4ffc7dda9a40fe6d66ac8ad4f819f46c0ad7238ab9306cd2763f027fe298d0c6718c7c38d03487acd60f8c64dc0e195860d0d2","ssdeep":"384:ISgpVcda23p7htI+guDSeA3uQ/I5zs3fEUrF499phNL+R3i+s:ISgpVYa23p7rI+iT3uQ/KUrFq9phNiRq","tlshash":"a7923c9a77cc0406a2eb9257e083a68f776dc2418dae4812c9974132ead3fdbf17175c","size":20678,"data":"","first_seen":"2026-06-25T00:25:32.008278Z","last_seen":"2026-07-23T06:20:40.372508Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/_shared/js/intlTelInput.min.js?v=23","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1ed9de900d79b0b17339dc36efc715e","sha1":"b18ddb2733e358d450a870de992a93a20875ad53","sha256":"8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce","sha512":"6c8f29f8dd9a6ac4ee24bcbc02f3a2cfde5a95341733276da8ae5c34eaaa22b6835d9510c3043227a71a74b287c884f60a4490da522d0c2d711caae18ca46527","ssdeep":"768:m603Xlqn/kiIzEfCjJMvA4BX2q2nodn24c68g:mDiIzGA4Gnod3","tlshash":"17d2e8ae73656b37aafd82a270a50513af7f79444704083d78ac8ede1288ed171f5b34","size":29364,"data":"","first_seen":"2024-08-19T16:10:17.967477Z","last_seen":"2026-07-23T06:20:40.357434Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/_shared/js/utils.js","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6eae88fad6fe723d8c8d2386a63dd152","sha1":"42046e250c7f2eeff4619a89b0be7b83e01e5edf","sha256":"a4000409a897003b1c5a8e1f9f32e18a11b022452151cc47c17ecdcb76d5223b","sha512":"d356bd87f7170499fbf445353afeda69dbaccc391eb41826290a30752475735a27d56ce1d642af1dcb02f93a1405926a440add5cb38000b7d112cab0f918bd6e","ssdeep":"3072:9klM0hpJjFs3OwPss3MwPKm7i9T2xFM8Mp2xHsNBWUsD56kmLNTg/QKWVRphmVEw:9klMipBKxxFM8Mp2qbZQ","tlshash":"1144f1ebd63c9737a1e97b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","size":258914,"data":"","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-07-23T06:20:40.368432Z","times_seen":1900,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-23T07:21:35.87695Z","times_seen":404257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-07-23T07:26:59.000393Z","times_seen":186476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/script.js?v=mrtj36w3","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d1d453bcc7c64fb2396b15c70078b45","sha1":"63f51157306ebfdc038c7f7763aecff9da74d68a","sha256":"e79a99543a0af4ea61fa00f8d5d6718501e334693a96e0ed8bf192f30ee62942","sha512":"046705a21330cd9de7f001e3d4274e199b6185bc89377f454cee2a7deff510c5b6638b801b84243c8bf7d4250ff76a460c887a24d7dfd2385836c1ea4acd7582","ssdeep":"768:zDiMj78IoKEilUdSdEum8wj0gqR3IQB05Ie2Qt7QYMExo69nI+:HkIe2Qt8U","tlshash":"f3f2c8ea3ae7112199abb13fe3da954736f940078c55c821bc0d03614fe4e68b6f97e4","size":35167,"data":"","first_seen":"2026-02-22T03:51:31.864777Z","last_seen":"2026-07-23T06:20:40.360454Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hbitatrzovin.com/assets/img/corner2.svg","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hbitatrzovin.com/","date":"2026-07-23T04:44:58.810Z","timestamp":1784781898810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET /assets/img/corner2.svg HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hbitatrzovin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5ZrvaEhADrKObGYjLM9UvXzo%2FGQbgsDXwM6GiOUbw%2BO%2BCU9qCrvzY%2FqGHOMjITA%2BjN7PV5Zp4q0QWrIFkqqQsp3JbLbV9o6v4kiyuF64CbjLmK%2Ft7Z1YGdK71NSTeUHOBxN6%2FJj%2BklsbcTSEmicMyWrds%2Bk%3D\"}]}\r\nx-powered-by: Express\r\ndate: Thu, 23 Jul 2026 04:44:58 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a1f8087389ba56a2-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i\r\nage: 127493\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"c4-19f518b9148\"\r\nlast-modified: Sat, 11 Jul 2026 14:18:49 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":196,"size_decoded":927,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bddec6b94d591a372b322d9dbe4af477","sha1":"bb2f55596d487d79eecc8fefeaa67f27beef055a","sha256":"b75623bf33999e833884935e227bdc161f6b227eab202a16d2cc819fdce38d8c","sha512":"e2949eb42a4030ef33b2b7c59b0dc2a04702424a68d136a58d949d2b2ccb34d80c7bcce9156ecd34ea73589a21090a20adf7fce27d313b1b980a144144340f9a","ssdeep":"","tlshash":"9ad022faa1088820d0048108b728794d10a2b1978ac400e889883b2bf8279d27c33398","first_seen":"2026-01-27T23:48:03.865874Z","last_seen":"2026-07-23T06:20:40.358932Z","times_seen":89,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/_shared/js/intlTelInput.min.js?v=23","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hbitatrzovin.com/","date":"2026-07-23T04:44:58.997Z","timestamp":1784781898997,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET /_shared/js/intlTelInput.min.js?v=23 HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hbitatrzovin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MhKWKz9GGDH8ILt0QvGGohgF%2BUQbiqS6m0bW3sC7%2BHk9E44S5RTg00xxE9wvLyFZf6A%2Fqcf1481ugOI%2Fp1n1ilx8yTxzbKNrDK9bMLNs5g10aVeY8EgLD1G98AFPO4OVun%2FTJclz9nPqdCQnC5ajtL1GIVc%3D\"}]}\r\nx-powered-by: Express\r\ndate: Thu, 23 Jul 2026 04:44:59 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a1f80874b9c856a2-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 127493\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"72b4-19f6ac1ec79\"\r\nlast-modified: Thu, 16 Jul 2026 11:48:41 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":29364,"size_decoded":12657,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (29008)","md5":"a1ed9de900d79b0b17339dc36efc715e","sha1":"b18ddb2733e358d450a870de992a93a20875ad53","sha256":"8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce","sha512":"6c8f29f8dd9a6ac4ee24bcbc02f3a2cfde5a95341733276da8ae5c34eaaa22b6835d9510c3043227a71a74b287c884f60a4490da522d0c2d711caae18ca46527","ssdeep":"768:m603Xlqn/kiIzEfCjJMvA4BX2q2nodn24c68g:mDiIzGA4Gnod3","tlshash":"17d2e8ae73656b37aafd82a270a50513af7f79444704083d78ac8ede1288ed171f5b34","first_seen":"2024-08-19T16:10:17.967477Z","last_seen":"2026-07-23T06:20:40.357434Z","times_seen":28,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/assets/img/apple-touch-icon.png","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hbitatrzovin.com/","date":"2026-07-23T04:44:59.192Z","timestamp":1784781899192,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET /assets/img/apple-touch-icon.png HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hbitatrzovin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-powered-by: Express\r\ndate: Thu, 23 Jul 2026 04:44:59 GMT\r\ncontent-type: image/png\r\npriority: u=6,i=?0\r\ncf-ray: a1f80875f9d956a2-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 116249\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"3d57-19f518b9147\"\r\nlast-modified: Sat, 11 Jul 2026 14:18:49 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5PkFPO2H1qBpr9cdfGacHCwnHX8mYPW4AHx%2BbUIdIkdtIqkSxfuK2usPnXmPSoy7LzjBCns9%2BTRPWpI4O0V%2FHzNe%2F6q5Lvz5dS8ffAK5pBtX%2FRvAPY2lsLqAaS4VVMtJWafjdABFrFwUjaIQJfa4VirJxus%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15703\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":15703,"size_decoded":16484,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"2346d102b5054b43d17c6d35c3f534dd","sha1":"01b613085e28b6a61fe2bda94d8f3cc0ac333665","sha256":"c4be5c7418d267992f3c4d400f9eadd87d29da0d4ba244aef10c94d86b02e9af","sha512":"6720c35dd230d3263329b460f42d966894d76899536ce56c822301bc43f72a6789922542c158ba6c07263c688bc3675c71c51ded9f0750ac208612a518c88855","ssdeep":"384:Nr6TrwDtLgiSJCk96Ls8T0SrF1mCSdPbfe52Wmb2t9+gp4J:7DtLgJCWuzmCSdPZi9yJ","tlshash":"5462c09ac38db8a2fd58a65cbd2870127e71b90b01c75123c6cf67fd548e98be891405","first_seen":"2026-02-13T18:05:58.339Z","last_seen":"2026-07-23T06:20:40.357939Z","times_seen":75,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/assets/img/block-form.webp","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hbitatrzovin.com/","date":"2026-07-23T04:44:58.812Z","timestamp":1784781898812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET /assets/img/block-form.webp HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hbitatrzovin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-powered-by: Express\r\ndate: Thu, 23 Jul 2026 04:44:58 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i\r\ncf-ray: a1f8087389bb56a2-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 127493\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"876-19f518b9146\"\r\nlast-modified: Sat, 11 Jul 2026 14:18:49 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I4ZZbOvE9YCMC8R4YmqnRxsojWh%2BoMfWbq5ULpyE8bxckOzrOD9AVYmjQ5ZtMrrkZ8vyEW4xu0LQP7j0cEZRy5uty7kukBYG%2FWBt2laicIT95dnhMuumE8naZ3uIlUHHWH9pkXUuOBcyW9D1RL%2FMPQdDivA%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2166\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2166,"size_decoded":2939,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x422, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3d9eb3c4ec0e6238b34e0c95cd3310ad","sha1":"df0989366e5a9c8adf4453143e80fab2513b6d45","sha256":"b548d0252029b2c693def5256ca9a3ce9dcf42b883ebc53fe187e1906cbc3365","sha512":"55aea1019dd23703847c418c76ca7c67516d3eeda22b7b4c4500644a62d1b135404e50166abe85bb6804bc5557da4414ca8894e21d9386e5cda2ede9ecc5d2d3","ssdeep":"","tlshash":"95412b863c5b95a6f8bf9e8e73b7c91f842d10e8d8bd68948eb208c088b30415770c51","first_seen":"2026-02-13T18:05:58.347431Z","last_seen":"2026-07-23T06:20:40.363464Z","times_seen":75,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/assets/img/handel.webp","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://hbitatrzovin.com/","date":"2026-07-23T04:44:59.011Z","timestamp":1784781899011,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET /assets/img/handel.webp HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hbitatrzovin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-powered-by: Express\r\ndate: Thu, 23 Jul 2026 04:44:59 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i\r\ncf-ray: a1f80874c9cd56a2-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 127493\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"3cac-19f518b9146\"\r\nlast-modified: Sat, 11 Jul 2026 14:18:49 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hb6LWzAdLcQljyAtmHS%2BnqQY7NxbCzpR1mXsWADizd7kqOHAZbH7RJa3fhsl3mfkIlHPDv47%2FsEOk0RZjbbxpFfUXQfIP5NQ6GVKWhnXi0WMKr%2B9gVU7tnmzgF%2FTud3g%2FRnue%2BCKNyglnI082lSgiXrLHdc%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15532\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":15532,"size_decoded":16313,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dfbe6f3a04fba91fe042d809d8a3d9e0","sha1":"1a87141e295949e188407a879e7d4f299a4090a7","sha256":"4f9629d9385fd85c959a17ae6330b7a16a246190f8d421ea2dc016cfd88d00bf","sha512":"5cb1d40911c394ad8eff9c61d7d55aaca85ce92053e9abe0f3617889d25db2e7008bac91e28becced1107da4cfd7b672a12930709735e22523b24cf2ec8a6fb9","ssdeep":"384:nL6GFdTa3OHC2QZDitj2O4vQ/Pzz/C3IYZnoAQQ0/:numG3jw2LQTooAY","tlshash":"5f62e137139b291798742e11a198d98c456c7baef85e838c9eef90bb6715c038d0b935","first_seen":"2026-02-13T18:05:58.355291Z","last_seen":"2026-07-23T06:20:40.369937Z","times_seen":74,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/assets/css/styles.css?v=mrtj36w3","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hbitatrzovin.com/","date":"2026-07-23T04:44:58.795Z","timestamp":1784781898795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET /assets/css/styles.css?v=mrtj36w3 HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hbitatrzovin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rxYC8x6ML6QHeh4mmSVebxpzuUR8eWVsngw2sLuiltuRW2uW21oaIL11E4M9a5T8QG9nN8tPcMcawfcKBJbVGjNYKeXkmgzCSusL0OplHyA%2FnYmRDdABckK83CZQkJ7bLgJpz4p2ghBA27DhsEi3W0DT0lI%3D\"}]}\r\nx-powered-by: Express\r\ndate: Thu, 23 Jul 2026 04:44:58 GMT\r\ncontent-type: text/css\r\ncontent-encoding: zstd\r\ncf-ray: a1f8087379b556a2-OSL\r\ncf-cache-status: EXPIRED\r\npriority: u=0,i=?0\r\ncache-control: max-age=14400\r\netag: W/\"9776-19f518b914d\"\r\nlast-modified: Sat, 11 Jul 2026 14:18:49 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":38774,"size_decoded":10314,"mime_type":"text/css","magic":"ASCII text, with very long lines (25358)","md5":"261dc5d066ac9b1896223d590428a3e9","sha1":"0d8e922c34e48d0a2a353f1a9a9ae97589a19a07","sha256":"e8b390df61dd3f1efe352cbaf4cd30e188f838643f3fee8c56e0976852d88ebb","sha512":"961a45d7cfcc7ac892cea374f7b07ffd2194e4942b09f3f6113d9306564d3f671b0754d5d969c5ab0c74c8d8d14c9921ac0abf60cdf923610bb6f14748bcc35f","ssdeep":"384:YFH0PhUj2sRno73XZLrkPPC1JSFdqryC20HqSIlWTIOXEGGbcb8Fui/rrNdI4gI:YFUPJsmVwMIFd0yp0HqSIQIO0HcbiPII","tlshash":"8d03d8136120222df03bc862abd1179e7268c423c11397feed92e515cfcb6964b7268f","first_seen":"2026-03-14T13:26:03.969544Z","last_seen":"2026-07-23T06:20:40.364452Z","times_seen":38,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/style.css?v=mrtj36w3","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hbitatrzovin.com/","date":"2026-07-23T04:44:58.796Z","timestamp":1784781898796,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET /style.css?v=mrtj36w3 HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hbitatrzovin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iS7U%2BgXg2GLBbwcUn2m500k1ZpxcfFaMs9fAMNvtT8LPd7Wqrb9HXOc%2FkDnQPlK%2FbMzurhLHlNnMHEW63%2BL2%2Fk5Wi%2F1wIYu%2FSMf%2FlpFDmv43hfgZjkmgTqXstwRhtToyUS6UzyHST5NuOayoi9fMkxO85yM%3D\"}]}\r\nx-powered-by: Express\r\ndate: Thu, 23 Jul 2026 04:44:58 GMT\r\ncontent-type: text/css\r\ncontent-encoding: zstd\r\ncf-ray: a1f8087379b656a2-OSL\r\ncf-cache-status: EXPIRED\r\npriority: u=0,i=?0\r\ncache-control: max-age=14400\r\netag: W/\"1a82-19f518b9137\"\r\nlast-modified: Sat, 11 Jul 2026 14:18:49 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":6786,"size_decoded":2611,"mime_type":"text/css","magic":"ASCII text","md5":"1fc97aac0caea09d49f5be574f2d2447","sha1":"a6779d6cd05d13ab30b654c72e37681a3d6baa69","sha256":"fe07bd634592d296b5239dd66b71f285bd87a364f0267ef316529055c3678235","sha512":"dd48c13461a6dc29a49d4aadef99f1fd39f180f65495acc70279285c8830fab788bcc0e93c4182be53ef958c1f5dee4b5bd27e6fda742faa8ca808bd5a62ae11","ssdeep":"192:/UzxgpdkJRnGDFozD+qFCFXAVOMHbO5JV8fXrOvz7OyjJ9GAXGmWe4ezHbw/A:QDnEFMFCuk18A3","tlshash":"ffe1018a6a630901641794993febd749737d9003810ec9bd7bdd628c8f8a1ecd5a2bcc","first_seen":"2026-02-13T18:05:58.318663Z","last_seen":"2026-07-23T06:20:40.362997Z","times_seen":73,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/_shared/fonts/12c7466943d2.woff2","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hbitatrzovin.com/","date":"2026-07-23T04:44:58.865Z","timestamp":1784781898865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET /_shared/fonts/12c7466943d2.woff2 HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hbitatrzovin.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-powered-by: Express\r\ndate: Thu, 23 Jul 2026 04:44:58 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a1f80873e9c356a2-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 49441\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"504c-19f460b851c\"\r\nlast-modified: Thu, 09 Jul 2026 08:43:07 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T5duOyXz1mX6UbAsPh1yWEdkQNvwqlsI6r88vm30xKIyaZduzizyh0ykgQkcQajh%2FfoCrSI1l%2FGafzu10bwFot63yXGKzX63cSp76rwMUYmXmpS0vr%2BIaS6UxmQjl0sDW5qdwunqT%2BU2zJNIBkqAj8RrP5Q%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20556\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20556,"size_decoded":21336,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20556, version 1.0","md5":"8feefe1e602c4b14ff414a77c3af2c2c","sha1":"e57daae78e76c8944e97edecfa656f8608e09db5","sha256":"2addf2d86d7a5778653b36d551e97a39da52855f82fac7461cfc1bd86d460aed","sha512":"893f9695ee887eed00246f24d4ec3e17ed64e2af4fab055f951795f50d34f3685aafcfbda943060a132c42169d2ef5c99d3db4fb901d57a09e712b4ff02afd92","ssdeep":"384:tpv6fcCujSd2+uNZ0omwRnNPqfWvx/CldKV8D2w9lQXL79Ci5q8S/USM2BHRpWp6:fxC0So4wRhx90K6ywQLIWS8S5By5AR","tlshash":"8792e056b288746a77e4e3ecc859ae6c65ed9b0f0c1b15b909322122f196c4734930f9","first_seen":"2026-02-19T22:35:21.90447Z","last_seen":"2026-07-23T07:45:59.734473Z","times_seen":26288,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/assets/img/users1.webp","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://hbitatrzovin.com/","date":"2026-07-23T04:44:59.004Z","timestamp":1784781899004,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET /assets/img/users1.webp HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hbitatrzovin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-powered-by: Express\r\ndate: Thu, 23 Jul 2026 04:44:59 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i\r\ncf-ray: a1f80874c9c956a2-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 127493\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"4e4-19f518b914a\"\r\nlast-modified: Sat, 11 Jul 2026 14:18:49 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oSIs7ccYKIdD3KM0X%2BseiD8emH6DIL7KngP2xQiPWBSmS83o9UYlClGEsXrX2dIpdYe5vdVa%2FH3aQ%2FczeP0W6nsDB0%2BEZxhp%2BEZdp0NV%2F8P25AAfmsZKRQGiz7e0a9pyq1%2BZihKWSMdy8kr4rTnDgbft4n8%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1252\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1252,"size_decoded":2033,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 80x80, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c52ffe9270e0bc1fc4390cd3473a4108","sha1":"26bc8770b25c6aaa221d2388d61a361c40b97f70","sha256":"ec64cac2163c019b4264370b3f7dde988b8d4f0319d4fc7fc0a26dc79057e9cf","sha512":"659409ba3ccd7d366e2b30491ad482d11a3564e9d09904407206a8ef0b216ce6f1af5fb2e5e54efe261e90d731d1dae32db61bbe0aa14e7027fca2ecf62a05cb","ssdeep":"","tlshash":"cf21e7ccab2ec7b71da961147d0a48bcead91c9add96204286670f9541501ec2c2046b","first_seen":"2026-02-13T18:05:58.350434Z","last_seen":"2026-07-23T06:20:40.356949Z","times_seen":77,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/assets/img/stars.svg","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://hbitatrzovin.com/","date":"2026-07-23T04:44:59.009Z","timestamp":1784781899009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET /assets/img/stars.svg HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hbitatrzovin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JXzITDYRbnCoOAhl5be4WS79wtq8ks5vVpTlRZGW8dpIelv0%2BgkThI3QyvPXwubEgnt3CwqAVuKclhz21iu0NEffuMCvwxbKtXRArbk41Gz9ZbIaN%2FPBmdyf3D%2FtSLQ0bUckDsf7DDSMOtxvxZx6pVE7UZc%3D\"}]}\r\nx-powered-by: Express\r\ndate: Thu, 23 Jul 2026 04:44:59 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a1f80874c9cc56a2-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i\r\nage: 127493\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"469-19f518b914b\"\r\nlast-modified: Sat, 11 Jul 2026 14:18:49 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1129,"size_decoded":1221,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"19f6e894f93dacd3cdd1cc38a58cc2d1","sha1":"18d1cfb77226b4decf68ded513beb24c0a47a742","sha256":"366c75499d15d5401fee8990f6cf5ac816df548976e2d60027612c49340ec567","sha512":"2bf9d2730a59881c1d3eb74ae0d814df9a12f4f8a6e219dfe21785ed9b53f1357eb5bbe78d9032c23f178196d1a2df145d6cfe9683805e01ed6cf03fa2ae9a15","ssdeep":"","tlshash":"6b2157fb37dc7185e1568b7e8b1d712e689d2efc7a00a1064ec0281060e1dd3a59eed0","first_seen":"2026-01-27T23:48:03.905706Z","last_seen":"2026-07-23T06:20:40.369436Z","times_seen":89,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/api/sms-verification-status","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hbitatrzovin.com/","date":"2026-07-23T04:44:59.049Z","timestamp":1784781899049,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET /api/sms-verification-status HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hbitatrzovin.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-powered-by: Express\r\ndate: Thu, 23 Jul 2026 04:44:59 GMT\r\ncontent-type: application/json; charset=utf-8\r\npriority: u=4,i=?0\r\ncf-ray: a1f8087519cf56a2-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate\r\netag: W/\"10-KvPJ5jOoNVLVzdpG9ULAE+j4Mno\"\r\nserver: cloudflare\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FXvhh4veyg5NMcYiAMUkT42h42XfAo7T2w%2FW9bJm2nOjqUfsC%2B99b5IjPnWlLpECe8IuJ3WSFfzvEUGJEUCTTdmzt3o%2BR3GoR3nlxqSK2WW9Yz5ij0fOB9Vg5Dl4tHtieeNSK%2FzPbb7j8wSwbq5yxU2iWao%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":16,"size_decoded":770,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ebd28baaaa212dca587bc607653bbaf0","sha1":"2af3c9e633a83552d5cdda46f542c013e8f8327a","sha256":"26b3426b2593763c96d0890b4a77a0bbf66d13fc512b0c6b138a23c290f30a2a","sha512":"5f9fd1cb13b3e55727341631d1bc18a0ae93a33d29179b7c4d681f5818cfb3d5e84aeb978790501575b426b831f272f5ff5e2b4cc5eb8cf00cce8bf4372e7d71","ssdeep":"","tlshash":"4d600002080020a08080c00082282a23002088300002202000082028003a8200300822","first_seen":"2023-04-06T21:44:20Z","last_seen":"2026-07-23T06:20:40.359459Z","times_seen":728,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/_shared/css/intlTelInput.css?v=23","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hbitatrzovin.com/","date":"2026-07-23T04:44:58.788Z","timestamp":1784781898788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET /_shared/css/intlTelInput.css?v=23 HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hbitatrzovin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PG22g1hoctRtH0gIoDgpqEagkQrO6lN3BfkcOqCzMSpo1YQ4BYmHPDq4tHxVravJ25HhjogIiiDaFPuYboh3AKxJWsGIagS5ZjAkh%2F%2BpMRlaPlmK9fLxwMHij9lTwuayjCa5jDSdnnVXyLRNxQTemFKuW8w%3D\"}]}\r\nx-powered-by: Express\r\ndate: Thu, 23 Jul 2026 04:44:58 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a1f8087369b356a2-OSL\r\ncf-cache-status: HIT\r\npriority: u=0,i=?0\r\nage: 127493\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"5038-19f6ac1ea96\"\r\nlast-modified: Thu, 16 Jul 2026 11:48:41 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":20536,"size_decoded":4257,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (830)","md5":"5666efc01f49c40fa97f552a8fb5abce","sha1":"3797983375e52511c41050f6abcad7d0166ed5b6","sha256":"1b5c1ce40a41a570a1f08d1ec71f1d6e7de73b5a048935367f6c483ee727e06a","sha512":"ee22d0bc0200b879b54028e76327a030e39c477565c01e9ad4671656fd0415342496dfd0eb5dc89b5144b54821d527d551892489bede544e35f661ac52e6a3a4","ssdeep":"192:pI20NDsX5uVsAPRkk8ei/yE9y6czvZzorr8/zJHVyT1bK0VN12o7tHPVEVtVaVb2:wVsXk1Rd4qE9y6mporr8LJj0H12o7U5","tlshash":"1c929e2346b00d3e965dc1fa38a2c1b5773f1c8a35eecc96eed9504a1887b90e5ebc54","first_seen":"2026-07-18T04:12:14.860646Z","last_seen":"2026-07-23T06:20:40.367466Z","times_seen":17,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hbitatrzovin.com/","date":"2026-07-23T04:44:58.799Z","timestamp":1784781898799,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hbitatrzovin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Sat, 25 Jul 2026 04:44:58 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z5vs9HjGVzM5rAAtUSNLqACfED2ZLjK0kYOQAKKf0F5nEqmIN2tXY9xy2aVaglnmdDWDcnwLvcBxak8KDG7waFPyZ0dbJDPoLoKTgEopYfXA0xg1XNdmxxjev33jePoFk8GQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Thu, 23 Jul 2026 04:44:58 GMT\r\nserver: cloudflare\r\ncf-ray: a1f8087379b756a2-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1282,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-23T07:21:35.87695Z","times_seen":404257,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/api/sms-verification-status","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hbitatrzovin.com/","date":"2026-07-23T04:44:59.402Z","timestamp":1784781899402,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET /api/sms-verification-status HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hbitatrzovin.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-powered-by: Express\r\ndate: Thu, 23 Jul 2026 04:44:59 GMT\r\ncontent-type: application/json; charset=utf-8\r\npriority: u=4,i=?0\r\ncf-ray: a1f8087749e756a2-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate\r\netag: W/\"10-KvPJ5jOoNVLVzdpG9ULAE+j4Mno\"\r\nserver: cloudflare\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9HX9wgIqQwmCkNvBMngj8WqzDZKqpiw2My2%2FFbgu5Da8FhmzSFrGQ2eOMh40NwRmUqewhKpB0rkGDnlbdFKBPCUB6xCLKMNNpknKLQsHRWhR3vkGlaqvc2x6w0UDmjtR1apl%2Fczn13Vgx34qZFRXOIoGpy8%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":766,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ebd28baaaa212dca587bc607653bbaf0","sha1":"2af3c9e633a83552d5cdda46f542c013e8f8327a","sha256":"26b3426b2593763c96d0890b4a77a0bbf66d13fc512b0c6b138a23c290f30a2a","sha512":"5f9fd1cb13b3e55727341631d1bc18a0ae93a33d29179b7c4d681f5818cfb3d5e84aeb978790501575b426b831f272f5ff5e2b4cc5eb8cf00cce8bf4372e7d71","ssdeep":"","tlshash":"4d600002080020a08080c00082282a23002088300002202000082028003a8200300822","first_seen":"2023-04-06T21:44:20Z","last_seen":"2026-07-23T06:20:40.359459Z","times_seen":728,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-23T04:44:58.404Z","timestamp":1784781898404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-content-type-options: nosniff\r\npriority: u=0,i\r\ndate: Thu, 23 Jul 2026 04:44:58 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a1f8087179b156a2-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: public, max-age=300, s-maxage=600\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QT2pBERZuwcDRzcr9HbO3VppOVbcXaR5pHxkEYZj6Ho0uTGX%2FLeiQslq1HxRWp5dm2%2BZbnOYbsfRIIFZLXR%2B90MCV0NXNyY6Q%2F1VqElNxhHANTL%2Bk%2BVHhn4typza9Fc1OXMFpsq%2FA%2BDyPpMLoftxcOz%2FmqE%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122818,"size_decoded":33194,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (38055), with CRLF, LF line terminators","md5":"69a53d6fc1fd1dac94c4871c1dbd0405","sha1":"9b5025aa6e2eddcb97420d2644c5ffe81ea2ceb9","sha256":"a89b57d6cbede1e88579a615d96d8f386cf083035fefb98d0f110709a4883cce","sha512":"dda8b987cb569631a311f67fa6f7d032f17c061333429a168c12e33acceb9959d0fd183ab969f788830918f3c15f426d482a73545badc154ad571a1b53b621df","ssdeep":"1536:2zrcp6vsEa0HSJwYpOedIIwIIIII8FRAKySrzHSIed0/K8qGK:4cppreRJHH/KpGK","tlshash":"75c34c33a185101e61b78492a6e1675ef66c8203c10746fafafd57178ff7c929a3328d","first_seen":"2026-07-23T04:45:30.51211Z","last_seen":"2026-07-23T04:45:30.51211Z","times_seen":1,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":46,"connect":23,"send":0,"wait":102,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/script.js?v=mrtj36w3","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hbitatrzovin.com/","date":"2026-07-23T04:44:59.288Z","timestamp":1784781899288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET /script.js?v=mrtj36w3 HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hbitatrzovin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BuCd91eTG5KI5is4YLjvf76%2BPDZDz%2BifWfNTvwX9iHsOM2IdkNE9VCYyb64LBDRDPU6s%2FdxK5k6%2BPArnF30cVmIATj%2FgeLV%2BSy2iNIYSBwehWp07dXQVRBkczmOtppRQjp8QSkbpZLj9wdDcuSOlGxG%2B0qc%3D\"}]}\r\nx-powered-by: Express\r\ndate: Thu, 23 Jul 2026 04:44:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a1f8087689e256a2-OSL\r\ncf-cache-status: EXPIRED\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\netag: W/\"895f-Y/URVzBuv9wDjH93Y67P+dp01oo\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35167,"size_decoded":10487,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (676)","md5":"9d1d453bcc7c64fb2396b15c70078b45","sha1":"63f51157306ebfdc038c7f7763aecff9da74d68a","sha256":"e79a99543a0af4ea61fa00f8d5d6718501e334693a96e0ed8bf192f30ee62942","sha512":"046705a21330cd9de7f001e3d4274e199b6185bc89377f454cee2a7deff510c5b6638b801b84243c8bf7d4250ff76a460c887a24d7dfd2385836c1ea4acd7582","ssdeep":"768:zDiMj78IoKEilUdSdEum8wj0gqR3IQB05Ie2Qt7QYMExo69nI+:HkIe2Qt8U","tlshash":"f3f2c8ea3ae7112199abb13fe3da954736f940078c55c821bc0d03614fe4e68b6f97e4","first_seen":"2026-02-22T03:51:31.864777Z","last_seen":"2026-07-23T06:20:40.360454Z","times_seen":21,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/_shared/img/flags.png?1","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hbitatrzovin.com/","date":"2026-07-23T04:44:59.400Z","timestamp":1784781899400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET /_shared/img/flags.png?1 HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hbitatrzovin.com/_shared/css/intlTelInput.css?v=23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-powered-by: Express\r\ndate: Thu, 23 Jul 2026 04:44:59 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\ncf-ray: a1f8087739e656a2-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 127493\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"112b5-19f6ac1ecf7\"\r\nlast-modified: Thu, 16 Jul 2026 11:48:41 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yeJUjp1oN4Atv9QIC5i4aM8xfCEUphJ3%2BFo2BAlIeq0mD1dn9y8WXzfnjj6ekJQvd3up25qpDfm731zqj1GpsEKqsNGC3nxDT5JeEd7Q7KmMSfCXO0tkrJBoLYkHw71wTBNC3hf3Jr28eFWwwnnHR19WvUs%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 70325\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70325,"size_decoded":71096,"mime_type":"image/png","magic":"PNG image data, 5762 x 15, 8-bit/color RGBA, non-interlaced","md5":"0b1ca148890222235a0f9903636ca21a","sha1":"b451b4db431749cc40cc2a5f271f9807ca21f1d3","sha256":"54dc5bc49fbe41359681fa0af8add039fa1383a4f4eade34f7a0a5a257dd1caa","sha512":"37553ab4cecdb30b631d883dc0a1afe4b5e81b921fa2fb8054a63fa054c2f57954dddebfee1a5b676f97a392b954aaa553a803e6e9abeedd56f87da0b58a8475","ssdeep":"1536:3Cc3jdCcCx1zjonyR5/Gm5mwoKVehnITl1G/Ghdfal4pMy9c:SczdzCx9jonyT5mwo1hIp1hQ4pMOc","tlshash":"966302b241c2a627f87cb972b955522b673bfb30d280780a00cf15b6979517f04e3a3a","first_seen":"2023-09-16T21:00:24Z","last_seen":"2026-07-23T06:20:40.361488Z","times_seen":6201,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/assets/img/corner1.svg","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hbitatrzovin.com/","date":"2026-07-23T04:44:58.807Z","timestamp":1784781898807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET /assets/img/corner1.svg HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hbitatrzovin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e48x0Hzyz8bTitrxK9hgeVysgt%2FrUPL8RLN5We8sxdKTBDq7fKLP9qsBuowcJnihmXPmjwQoFjlmOO1ahV2gvpi02e%2Fg%2BjgV2%2FwmxzGIRTOwTPv29gxDwDtvxumQDsHFeqiI35BzFKiF72gyR5auKYIElNk%3D\"}]}\r\nx-powered-by: Express\r\ndate: Thu, 23 Jul 2026 04:44:58 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a1f8087389b956a2-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i\r\nage: 127493\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"ae-19f518b914a\"\r\nlast-modified: Sat, 11 Jul 2026 14:18:49 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":174,"size_decoded":909,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a4ab16ae2a2017ce3e8bbd485542178e","sha1":"b7e0d389e24a789afbd8edccae8120a290650960","sha256":"bae66139b7551e6d368218eea1cf7e660e43d144e2cca754e86a43eb2834c277","sha512":"930b204aae53f0f56b02fa858ef7b4019d2e1d67a6d0e5d0630b2f52cca9895b902d3545e15dc0205381668c6ac92b04ead3ac91ff25b976deafd00386d5be10","ssdeep":"","tlshash":"15c012fe5118d92191145118bb68651944a2a2834b8404d58949362ab851dd67977598","first_seen":"2026-01-27T23:48:03.861258Z","last_seen":"2026-07-23T06:20:40.365483Z","times_seen":89,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/_shared/fonts/cb43c05529e9.woff2","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hbitatrzovin.com/","date":"2026-07-23T04:44:58.830Z","timestamp":1784781898830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET /_shared/fonts/cb43c05529e9.woff2 HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hbitatrzovin.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-powered-by: Express\r\ndate: Thu, 23 Jul 2026 04:44:58 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a1f80873a9be56a2-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 49441\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"a880-19f460b853a\"\r\nlast-modified: Thu, 09 Jul 2026 08:43:07 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uMJpH8mzU%2F4zbritbE6%2Fph%2B6TvQ13o4KeUkVJ6UnaWgo6PE2jpUKUVe22cDJf80%2F4o7UacmhXHj7xsuSffDd2ZkSqKAN%2FUsI0%2FXc6MsOOPWAoJoYmv27XOou1TGRRFJZzsrym%2F2rkxiaZ1OluQN%2FBSb%2Flak%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43136\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":43136,"size_decoded":43926,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-23T07:27:13.344229Z","times_seen":240528,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/_shared/fonts/0fb06be4e0b4.woff2","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hbitatrzovin.com/","date":"2026-07-23T04:44:58.860Z","timestamp":1784781898860,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET /_shared/fonts/0fb06be4e0b4.woff2 HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hbitatrzovin.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-powered-by: Express\r\ndate: Thu, 23 Jul 2026 04:44:58 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a1f80873d9c056a2-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 17738\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"72d0-19f460b8533\"\r\nlast-modified: Thu, 09 Jul 2026 08:43:07 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kd%2B3%2BUFBus5xc%2FKulhvLGJecfrqensJKtrCAVlcx%2BQHORRIf6bgLLGxvQz0I5Z7z6qVWbYmXMACNRgUoue0XR73XVYepsIDS3JC8%2BCxbRZVR1LzsleFLVJqRQAQ9T7NsbX%2FxSXko8I7YsThrAlQ7DzusDLo%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29392\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":29392,"size_decoded":30176,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29392, version 1.0","md5":"a6323dda0842401b2923554d0ed8945f","sha1":"6a5e89b2f9b47f5a2fb11831479c02b4eebe3089","sha256":"cedb374b05a35034cf96db185db4eeb8f8ce49e1a56197673702ff11b5533d6e","sha512":"6fe8df13c6dbc738b1cfd40c14bda19dca6114b3a4f521ff46fa7ebe25f6ce11046b7d41c1a8528d2294afea5a1c985ff43db37a2de028c1fb61b7197210dac1","ssdeep":"384:Wz9Te6aaq6lpCaascbVjmWd8NifWrHJi9grlYlMl1EfUxFvskjZAFWiMhv4K6Nb2:u9jN2bVjmWQFqgskSWiVK6NbKd","tlshash":"65d2f15cb579c636a098e4b70df5e3bf9599cb39224b9b288341c0385aa3941e442b97","first_seen":"2026-02-19T22:46:38.271285Z","last_seen":"2026-07-23T07:13:51.23737Z","times_seen":13558,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/assets/img/favicon-16x16.png","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hbitatrzovin.com/","date":"2026-07-23T04:44:59.213Z","timestamp":1784781899213,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET /assets/img/favicon-16x16.png HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hbitatrzovin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-powered-by: Express\r\ndate: Thu, 23 Jul 2026 04:44:59 GMT\r\ncontent-type: image/png\r\npriority: u=6,i=?0\r\ncf-ray: a1f8087619dd56a2-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 111799\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"1e5-19f518b9148\"\r\nlast-modified: Sat, 11 Jul 2026 14:18:49 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aTEAAPfowE%2BnfEwGzhIwbuQOr3SIwtjTrr1m%2FRCd2YA9buVMR4Q%2Bsc74qb%2Foa%2FETDX5p5cNgJanNGZ7TBXKv9mz0Hr5H%2FPxWdqkCg65BS%2FOGjcH8%2BJMfjGtfJeFARY4D%2F%2BJ5Ec5d70MHGZvGbPejGsXDrZo%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 485\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":485,"size_decoded":1273,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"7f4998869f7510e01423031ee081be1e","sha1":"b62ecb33dbf114e202f44eea442addc08a5b2582","sha256":"eff054a9385bedc203a65624a26183d2a7512472400019d10d05cd978f6609e4","sha512":"ef3c1fac8501728e3cdf26c60b273246a3b57aa2355d608f42ca508c5b56dce99bb1f24d12287acbc1143bf894823832b9bf0331b6504d6888afe195991950b1","ssdeep":"","tlshash":"5df00ec32758023c9b48e06209294471e7a8931901842068df24c932294b48c8e97c62","first_seen":"2026-02-13T18:05:58.305898Z","last_seen":"2026-07-23T06:20:40.360996Z","times_seen":75,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/assets/img/chart.webp","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hbitatrzovin.com/","date":"2026-07-23T04:44:58.805Z","timestamp":1784781898805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET /assets/img/chart.webp HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hbitatrzovin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-powered-by: Express\r\ndate: Thu, 23 Jul 2026 04:44:58 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i\r\ncf-ray: a1f8087389b856a2-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 127493\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"67f0-19f518b9148\"\r\nlast-modified: Sat, 11 Jul 2026 14:18:49 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FuONlJogP6i69xnzQp1VjsmhKnYTzsEDQqTKKq2hHMySU%2FN%2B3YfVP9%2F1lh83QarMC7zYoswwej%2B6LmulBHSJrI076lB5xTglWpxVvoJyDq4Az2Xir24LYAwbOe37pDbmDB3Od%2FPt%2BzqN6FT9WCGsBRRafc4%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26608\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":26608,"size_decoded":27391,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3febd954201270dd265de9515a6bf154","sha1":"df12ba458f1ec0406a7dbc09f6df58b65877d318","sha256":"9a1ca6ad6a3030410c8e17ebf1647e25733549cec244d3263ac40dd1f9861db6","sha512":"e09d2c1dd199ba3063e599dcf6f886f3f56b1aaa7fc69982bc58ec18195e0df7293ae47b55f79790392819cc16afd62cb06430ce38e9b0164d9ce8340ced293e","ssdeep":"384:J0eIUWUvd5r09HIIPyrs9OVqszL0J0dZoX/f88jIX1AW3IgGMEeGpV4vg14:jWcd54HdPyI9OkszC4ZK/dIXOCVU3","tlshash":"1ec2e1b1a1cde1da3f04297b51f0a5680d42a097e7d28755e09c3e7014daed8e1d7fc5","first_seen":"2026-02-13T18:05:58.324296Z","last_seen":"2026-07-23T06:20:40.364967Z","times_seen":74,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/assets/img/faqArrBlack.webp","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hbitatrzovin.com/","date":"2026-07-23T04:44:58.818Z","timestamp":1784781898818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET /assets/img/faqArrBlack.webp HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hbitatrzovin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-powered-by: Express\r\ndate: Thu, 23 Jul 2026 04:44:58 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i\r\ncf-ray: a1f8087399bd56a2-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 127493\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"d2-19f518b9147\"\r\nlast-modified: Sat, 11 Jul 2026 14:18:49 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uI4P4BFHKB6SOJqkkr2yPy%2BtpNUc1fV3T9OyhxFrDfGOiKiYI9FLH0P%2FkqoZPHaA1Fkx44i9Ogm5ovkBh908AV7Q9scxkR9Drkojzl%2BzUjTyibR1vIYvoH9uMVfu3T4WVoFftgQDPFuPVWYofoMkqKlAF10%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 210\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":210,"size_decoded":981,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"de55809bc0c5d77f028abe78c27c9683","sha1":"6cc53129deef82e16fab8fca7bbf1d4b176d3e3d","sha256":"2a89f986e1108627c52864f81c38b1a511ff929e3dcfd275a39a08ff250920cf","sha512":"780cb348ee45946747d625ab78fb2386cf5aaf752c628314559e33c4febcf0769ce6c51ab4b76fa0cfc86419ba3a92971812e5aeb9e7300fea7d014720340d8c","ssdeep":"","tlshash":"3cd022978b82c2a4ca14aebd96b9f114a131a63e863495b4496b14b018b45047e7eb86","first_seen":"2026-02-13T18:05:58.348876Z","last_seen":"2026-07-23T06:20:40.356454Z","times_seen":77,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/_shared/fonts/bfa3ffdcf253.woff2","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hbitatrzovin.com/","date":"2026-07-23T04:44:58.864Z","timestamp":1784781898864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET /_shared/fonts/bfa3ffdcf253.woff2 HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hbitatrzovin.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-powered-by: Express\r\ndate: Thu, 23 Jul 2026 04:44:58 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a1f80873e9c256a2-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 17738\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"5d90-19f460b84b6\"\r\nlast-modified: Thu, 09 Jul 2026 08:43:07 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VSBkpFa%2F5zi%2B%2Fgy%2BvKyD3gsZoZZgTEZOqzhyzQYtm1HRxdNirf%2BXORvj6g3Ys4XD2wuhnU8obaE8Bmf9HZ7TkmYhqDXMH70%2Buvremzl7BMjZSB9m1swQ1wq3i9Mw0VPOtsY%2FUg9PzJ%2FDzCSr55VAAlgixiw%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23952\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":23952,"size_decoded":24740,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23952, version 1.0","md5":"192877db9c1654497c91e1143ae01aac","sha1":"7036927c267bd1a6553913593470211f51504592","sha256":"7989ccc7770f5aeffa67e088bcd3b294d42fae2f8b0eca3c3c51b953d1f735cc","sha512":"332dff4e49295eff8dddb3929813304f08c7ee88bd5ee2dd79f20304610eb629566bd749e18a1f1ea6bec5c2f7041d25f29fb2196fe04a9a3ac8c7683f819dcd","ssdeep":"384:fuXl7DxSQRVT9HW7jp4FAQqnZfyJFovo2HDf3vnDHrHmv7RjWA2OKOWkL4okHy8m:WDthiDZfycw2HDXn3Hs7AAAOWk0FY","tlshash":"20b2e1d7113a4b2fc5d7397214f6c3ee37d9216548ff022b182ee5d8a43219eaa13e61","first_seen":"2025-09-13T08:33:13.515993Z","last_seen":"2026-07-23T04:45:30.522287Z","times_seen":1230,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/_shared/fonts/91fad9c86d4f.woff2","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hbitatrzovin.com/","date":"2026-07-23T04:44:58.867Z","timestamp":1784781898867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET /_shared/fonts/91fad9c86d4f.woff2 HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hbitatrzovin.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-powered-by: Express\r\ndate: Thu, 23 Jul 2026 04:44:58 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a1f80873e9c456a2-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 49441\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"a184-19f460b8516\"\r\nlast-modified: Thu, 09 Jul 2026 08:43:07 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BhhaS3PZ%2BXctnZ1luHH0%2F%2FreRObIzCroGLQftlRGpVlrLPYN5PMayngJylwQFHLQtSU%2BBaJbsFL2oBJby0Kg8lSdNV3qv8%2Ba2KbNmYLt%2Fx%2B0oeZjSn5hkx%2FEecIEau3%2FzU1102e9hXFVQtu6GgSw1aZkOWQ%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 41348\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":41348,"size_decoded":42138,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 41348, version 1.0","md5":"1097956fa17313da073e6216a7ce860b","sha1":"205228bc618a378a36ef6200894c10aa1decda09","sha256":"7cb4281a0ccc84cc18617842c639fc66541cbef94a9dd245c754700210b4fcec","sha512":"d2f56f8ac5c1d6923329a6f731d4363682a336496eb70b7b097f463e49ab98ac2b647274a3ec20d7100a423be87544ac0695664ffe7fb7e75b4794aad9838bae","ssdeep":"768:TGU5B51vUw+tWqAGDH4WfomxkTXmXCoGCUjNjI6kBt8rx2rKCyrFAPkzFe:awBAbUqAPdT8v/Yj/UrKCWne","tlshash":"08030281e1301fcbd501e8b666bfb868ead51e5458e312b596f3c614c05b0eba35cfc1","first_seen":"2026-02-19T22:44:03.51646Z","last_seen":"2026-07-23T07:58:52.823015Z","times_seen":9496,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/assets/img/users3.webp","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://hbitatrzovin.com/","date":"2026-07-23T04:44:59.005Z","timestamp":1784781899005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET /assets/img/users3.webp HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hbitatrzovin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-powered-by: Express\r\ndate: Thu, 23 Jul 2026 04:44:59 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i\r\ncf-ray: a1f80874c9ca56a2-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 127493\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"5f4-19f518b9149\"\r\nlast-modified: Sat, 11 Jul 2026 14:18:49 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AneT93cThz4Cws5KGMrH3qFNDJaT6GORmgrCl%2Fp%2F%2BF5a7i5e7DlbhXZYsODyxQ2EDWbkTVT2Geu2FWpDAchBKKLdweGxpbtvAG9Vxytn39CEjkzLiNgAqebKVVtpgKXQhNy%2Bh2UoCs3VRvoT%2F4GiM1S4tZQ%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1524\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1524,"size_decoded":2301,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 80x80, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4aa146931d4feff5aa2c8bac714d839d","sha1":"c6ceda55c80f15ce141172ba59eea2620b82970a","sha256":"56b7f648aea7657ec2edd44feab069b929d06e7c2427954d45b460c39ce3f961","sha512":"6fcc0de79deb5b7a40adb52a15e452b271bd545549fa5ad67348deeecf45bee47b0da84cda8bda81c5633f1c3a56ee1ae43d5f141a3bb94f6ac2cf471a7802bf","ssdeep":"","tlshash":"4b3129d63e2d2b20e8e09bb644da83d607074c024ceb38f3e1808c85190a6b6dacb403","first_seen":"2026-02-13T18:05:58.313201Z","last_seen":"2026-07-23T06:20:40.365984Z","times_seen":77,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/_shared/js/utils.js","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hbitatrzovin.com/","date":"2026-07-23T04:44:59.398Z","timestamp":1784781899398,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET /_shared/js/utils.js HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hbitatrzovin.com/_shared/js/intlTelInput.min.js?v=23\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MKJL6Gq2KNhX9yaXz7zMp70KKuvHyrNrVqtzwakVOuGWc0fdzSfsiDgL216h37hU2hiYXxiI%2BZVFvAn%2FtpXRNDj5OLJmk4biMh0N%2FsTuY%2B7h6XJE4JvG5QPF2GACChKK7cGCxRfGue8WEexaLyvctlyKAsw%3D\"}]}\r\nx-powered-by: Express\r\ndate: Thu, 23 Jul 2026 04:44:59 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a1f8087739e556a2-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 49441\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"3f362-19f6ac1ec9a\"\r\nlast-modified: Thu, 16 Jul 2026 11:48:41 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":258914,"size_decoded":65932,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1903)","md5":"6eae88fad6fe723d8c8d2386a63dd152","sha1":"42046e250c7f2eeff4619a89b0be7b83e01e5edf","sha256":"a4000409a897003b1c5a8e1f9f32e18a11b022452151cc47c17ecdcb76d5223b","sha512":"d356bd87f7170499fbf445353afeda69dbaccc391eb41826290a30752475735a27d56ce1d642af1dcb02f93a1405926a440add5cb38000b7d112cab0f918bd6e","ssdeep":"3072:9klM0hpJjFs3OwPss3MwPKm7i9T2xFM8Mp2xHsNBWUsD56kmLNTg/QKWVRphmVEw:9klMipBKxxFM8Mp2qbZQ","tlshash":"1144f1ebd63c9737a1e97b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-07-23T06:20:40.368432Z","times_seen":1900,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/assets/css/app.css?v=mrtj36w3","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hbitatrzovin.com/","date":"2026-07-23T04:44:58.790Z","timestamp":1784781898790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET /assets/css/app.css?v=mrtj36w3 HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hbitatrzovin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qf2yIxFFMI1mILkEMRmq9RKBAs0hNwG9SD3uR7%2FvPSfx4z%2FJcJvVWrhXHyq2uid%2FzEwboAN8PMi9p9KJDbfU9ONu0nKsC%2BI9aitFrkcSvjd3bd9IKOgHFCg0YZ9N2GPZFS8XL%2BST%2BfrdEqcu%2Bt14Z3pcJws%3D\"}]}\r\nx-powered-by: Express\r\ndate: Thu, 23 Jul 2026 04:44:58 GMT\r\ncontent-type: text/css\r\ncontent-encoding: zstd\r\ncf-ray: a1f8087369b456a2-OSL\r\ncf-cache-status: EXPIRED\r\npriority: u=0,i=?0\r\ncache-control: max-age=14400\r\netag: W/\"b4e-19f518b914d\"\r\nlast-modified: Sat, 11 Jul 2026 14:18:49 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2894,"size_decoded":1518,"mime_type":"text/css","magic":"ASCII text, with very long lines (2728), with CRLF line terminators","md5":"c78039adc8464dd3ec35f3e2fbe7a8f8","sha1":"afe34a4b2fd105b13bf0c61877a5ba817120d14e","sha256":"cda63422fc6d1b5cd32d88289b4978b01c4a053da44b511cff82a98e71720551","sha512":"a6e49edb6bfd1aabaed878ea7e3c3c3054e13060c40c71495e9e028ee97c4ab8643096a6874aedb4159e643f223accd8142979f6cb11867d4570be950a1aaa98","ssdeep":"","tlshash":"4851891771927708702fcc251bd527a7a064d67a901a33f8dcb32a05cbe79521be638f","first_seen":"2026-02-13T18:05:58.341663Z","last_seen":"2026-07-23T06:20:40.358426Z","times_seen":72,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/assets/img/logo.webp","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hbitatrzovin.com/","date":"2026-07-23T04:44:58.816Z","timestamp":1784781898816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET /assets/img/logo.webp HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hbitatrzovin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-powered-by: Express\r\ndate: Thu, 23 Jul 2026 04:44:58 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i\r\ncf-ray: a1f8087399bc56a2-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 127493\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"7f0-19f518b914c\"\r\nlast-modified: Sat, 11 Jul 2026 14:18:49 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NrdDNWA56Ti%2BcO1GHdr6lXl%2F9Oe38%2BBkhG5c0pfLJNdIqkApmeoWG%2FhFI%2FXjA8zxeLcKUuN%2B1MtnIYRyZUPtr2bq61s2QuCDuRvKdOCEHP7CseSNOT9YR9ZWIYu2lCd4RhYeGCNo33Z%2BTYagWERZm70AJgc%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2032\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2032,"size_decoded":2813,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0a29c4c4f6f57d3e2858067d5e8423bc","sha1":"01d1fde7679a2be95db8477388e0c57825202ca6","sha256":"223143e8d9e0c11926cdd30ab9007f4b346b32e81ec02ee2a5cfb93129d725ce","sha512":"5994a435e029edf06dd468c9c51b2f3162901aa44f767f30e5dc01596daaad44ee3c4c6d1aa435af82a6bd6c68f415296b263c4eeabc88024178eb16bd680a8b","ssdeep":"","tlshash":"b5414c50254388c5564d473ce2335a8aa8425524786fc20b1f83fe0412db4ddafbf6bf","first_seen":"2026-02-13T18:05:58.315869Z","last_seen":"2026-07-23T06:20:40.368963Z","times_seen":76,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/_shared/fonts/3e17444efcd3.woff2","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hbitatrzovin.com/","date":"2026-07-23T04:44:58.862Z","timestamp":1784781898862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET /_shared/fonts/3e17444efcd3.woff2 HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hbitatrzovin.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-powered-by: Express\r\ndate: Thu, 23 Jul 2026 04:44:58 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a1f80873d9c156a2-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 49441\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"6f48-19f460b84be\"\r\nlast-modified: Thu, 09 Jul 2026 08:43:07 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QQBDRfqYdcixJD5HblclW3oD0aUKk6LlaJ3G2Ec37tOu8zKvinRkJzsbnjf7WcRuyiTdIA%2B5b8K4ZP7FaISRBbt%2FfuetTa7ntXMNQEzCpfKwH%2B0xNz5jBQchXGKdv7n5%2BPqPt%2BHqwTnOE%2BXQUYvjbkIjyRA%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28488\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28488,"size_decoded":29272,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28488, version 1.0","md5":"22c3b00d2e65fb2c876a292423108958","sha1":"3c61d84659817fef687045bbfa0e1da9568e164b","sha256":"bd73278ee0c50041b91b4c03d1229e35b501637f46b6409e7da2d3a758446ea5","sha512":"33954d8a7ed3c87b3af8577bbae9439b9efba2a64445463d893681dad085bb8630d31c995ce010510a9c732926017dba9d5fd5002d0000ec1488b61889d6ddfe","ssdeep":"384:jlzdJfoB5YJ2kG1CdQegm8m00xr19KB668/BOTqE85gyqvPA34uEomcGvpMwvg84:jlzdyBzhIb0u1QB6vBOv8uvPAovJCs4","tlshash":"cfd2e0195e9673efe4552d3ea830affe91e32aad30507162c5db6c1155c438bc8e4ec4","first_seen":"2025-09-11T19:05:43.498829Z","last_seen":"2026-07-23T07:13:51.183156Z","times_seen":33158,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbitatrzovin.com/assets/img/users2.webp","fqdn":"hbitatrzovin.com","domain":"hbitatrzovin.com","tld":"com"},"ip":{"addr":"104.21.91.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://hbitatrzovin.com/","date":"2026-07-23T04:44:59.007Z","timestamp":1784781899007,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hbitatrzovin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 16:12:22 GMT","end":"Sun, 23 Aug 2026 16:12:21 GMT"},"fingerprint":{"sha1":"C2:77:2E:9B:74:53:15:D1:6E:83:D0:70:81:0E:58:2E:A9:82:9C:D2","sha256":"71:AB:B6:CC:FF:81:4D:37:F1:7E:EB:BD:0D:53:7D:DC:9B:15:80:E7:E7:A8:0C:15:B9:56:11:44:1A:27:DF:6E"}}},"request":{"raw":"GET /assets/img/users2.webp HTTP/1.1\r\nHost: hbitatrzovin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hbitatrzovin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-powered-by: Express\r\ndate: Thu, 23 Jul 2026 04:44:59 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i\r\ncf-ray: a1f80874c9cb56a2-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 127493\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"498-19f518b9147\"\r\nlast-modified: Sat, 11 Jul 2026 14:18:49 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u265YrHiXkPQLkMFweQdpSTUB4shfXchKHSv6m083apm2v9ijN4f7HlSRuvNlwT1B3NkGOFDww2hCL2qAh93GtmFC%2FDihLcvfi3PgT2%2BZHkaxNM6jPlAjB3m31kv5DXNUu4SE8fgusPZvqcxF28ZASt6ylc%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1176\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1176,"size_decoded":1947,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 80x80, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"103d74fd26c79a1ea5e1fcfce9eb6d40","sha1":"d17449c6e97592299311a3eafc9b2170734e8263","sha256":"372d158e172e13a7c2eede136b444f0ee982f8ba0d19596fd3eb1ad45d170dd2","sha512":"65858eae14d8b45074c3da90c102945550264bdad1bdbf70d65baae26d5e73c480031b2e9c1df36c53099a73e79398e7cc0112a0bd4cc632f48c67c5ef6a5427","ssdeep":"","tlshash":"c521d7223a346e41aff7ab59e406036d2a0cc930853b8998518e8a6ea549c3d53a1528","first_seen":"2026-02-13T18:05:58.345143Z","last_seen":"2026-07-23T06:20:40.367936Z","times_seen":77,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"hbitatrzovin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"hbitatrzovin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}